CVE-2015-1238
HighSummary
Skia, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
Risk Assessment
Attackers may exploit this vulnerability to disrupt browser functionality, potentially leading to service unavailability for users.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Skia w Google Chrome
See all- CVE-2015-1214High
Integer overflow in the SkAutoSTArray implementation in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.
- CVE-2015-1213High
The SkBitmap::ReadRawPixels function in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Original NVD description (English source)
Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.